DEV Community

voluntas
voluntas

Posted on

Erlang/OTP の public_key モジュールを使って Android のアプリ内課金情報のデジタル署名の検証を行う

#erlang
  • PublicKey は priv などどこかにある前提
  • 署名は base64 でエンコードされて送られてくる前提
  • データは JSON を jsonx:decode(RawSignedData, [{format, proplist}]) でデコードされている前提 

-include_lib("public_key/include/public_key.hrl"). 

-spec public_key(binary()) -> #'RSAPublicKey'{}.
public_key(Filename) ->
    {ok, RawPublicKey} = file:read_file(Filename),
    [PemEntryPublicKey] = public_key:pem_decode(RawPublicKey),
    public_key:pem_entry_decode(PemEntryPublicKey).


-spec verify(binary(), binary(), #'RSAPublicKey'{}) -> boolan().
verify(SignedData, Signature, PublicKey) when is_binary(SignedData) ->
    RawSignature = base64:decode(Signature),
    RawSignedData = jsonx:encode(SignedData),
    public_key:verify(RawSignedData, sha, RawSignature, PublicKey).
Enter fullscreen mode Exit fullscreen mode

Top comments (0)

Read next

abhay_yt_52a8e72b213be229 profile image

Docker with Helm: Simplifying Kubernetes Deployment and Management

Abhay Singh Kathayat -

abhay_yt_52a8e72b213be229 profile image

Docker and Kubernetes Integration: The Ultimate Solution for Containerized Applications

Abhay Singh Kathayat -

nozibul_islam_113b1d5334f profile image

A Pleasant Work Environment = Better Productivity

Nozibul Islam -

abhay_yt_52a8e72b213be229 profile image

Unlocking Advanced Docker Networking: Macvlan vs. Ipvlan

Abhay Singh Kathayat -